Skip to content
Wpexpertsio vulnerabilities
Newest
-
saadiqbal email templates customizer and designer for wordpress and woocommerce
Email Templates Customizer and Designer for WordPress and WooCommerce <= 1.5.14 - Missing Authorization to Unauthenticated Order PII Disclosure via 'preview_order' Parameter
CVE-2026-107630
7.5 High
-
saadiqbal post snippets – custom wordpress code snippets customizer
Post Snippets <= 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
CVE-2026-77871
6.4 Medium
-
wpexpertsio wp multi store locator pro
WP Multi Store Locator Pro <= 4.5.1 - Unauthenticated SQL Injection via 'store_locator_search_radius' Parameter
CVE-2026-15275
7.5 High
-
saadiqbal post snippets – custom wordpress code snippets customizer
Post Snippets <= 4.0.19 - Authenticated (Administrator+) Stored Cross-Site Scripting via Import
CVE-2026-7430
4.4 Medium
-
saadiqbal wpexperts square for givewp, wpexperts givewp square +1 more
WPExperts Square For GiveWP <= 1.3.1 - Authenticated (Subscriber+) SQL Injection
CVE-2024-13713
6.5 Medium
-
wpexperts wp multi store locator, wpexpertsio wp multistore locator — wp store locator plugin: effortless integration with snazzy maps +1 more
WP Multi Store Locator <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-12475
6.4 Medium
-
saad iqbal apiexperts square for woocommerce
WordPress APIExperts Square for WooCommerce plugin <= 4.4.1 - Broken Access Control
CVE-2022-47182
5.3 Medium
-
5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more
Freemius SDK <= 2.4.2 - Missing Authorization Checks
CVE-2022-4974
6.3 Medium
-
saad iqbal wpexperts square for givewp
WordPress WPExperts Square For GiveWP plugin <= 1.3 - SQL Injection vulnerability
CVE-2024-47338
8.5 High
-
wpexperts wc shop sync, wpexpertsio wc shop sync – integrate square and woocommerce for seamless shop management +1 more
WordPress APIExperts Square for WooCommerce plugin <= 4.2.9 - Cross Site Scripting (XSS) vulnerability
CVE-2024-27959
7.1 High
-
saad iqbal new user approve
WordPress New User Approve Plugin <= 2.5.1 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-50902
4.3 Medium
-
wpexpertsio rocket maintenance mode & coming soon page, wpexperts rocket maintenance mode \& coming soon page +1 more
WordPress Rocket Maintenance Mode & Coming Soon Page Plugin <= 4.3 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-49842
5.9 Medium
-
wpexperts email templates customizer and designer, wpexpertsio email templates customizer and designer for wordpress and woocommerce +1 more
WordPress Email Templates Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2022-47181
4.3 Medium
-
wpexperts email templates, saadiqbal email templates customizer and designer for wordpress and woocommerce +1 more
Email Templates <= 1.3 - HTML Injection
CVE-2019-25150
8.8 High
-
wp easy pay easypay – square for wordpress, wpeasypay wp easypay, wpexpertsio wp easypay – square for wordpress +2 more
WordPress WP EasyPay Plugin <= 4.1 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2022-47177
4.3 Medium